CVEvulnerability

CVE-2026-36425

6.5 MEDIUM Published 2026-07-16 Modified 2026-07-17 Official page ↗
Status
Awaiting Analysis
Published
2026-07-16
Last modified
2026-07-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-269

Description

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References